connection issues

[urbtree]

high there.
i`m pretty good with computers but really a bit of a netwoking noob. i`ve had my netgear dg834g v3 i`ve had this set up for about a year. i have wireless setup for my laptop and have had no problems
recently i have noticed a few probleset with my connection.

browsing is slow, torrents wont get started/ instantly turn red and streaming of video is also slow.

i have done a ping to google and most of the time i get around 40 ms with no loss.
d/l from sites such as major geeks is normal speed wise.

this is about the limit of my knowledge on networking so can anybody help me.
i`ll be happy to give more info just let me know what you need and i do it

[johnwill]

Please review the Tech Support Forum Rules & Conduct, and you'll see we provide no support for P2P applications here at TSF. So, we can't help with that particular issue.

As far as general browsing, I'd start by shutting down ALL P2P applications and see if that changes things.

I'd also do an on-line virus scan, pick from one of these:

Trend Micro™ HouseCall

McAfee FreeScan

Kaspersky Online Virus Scanner

Panda ActiveScan with TruPrevent

[urbtree]

thanks for your reply and i did read the rules. please read my post again and note that i did not ask for help with any p2p application, i mearly quoted it as a symptom of my problem. i have had p2p turned off for weeks as i am having problems with my connection which was why i posted in the first place.

i`ve used panda before so i`ll give it a try. incedently i`m not bad with the old hijack this and see no problems when running a scan on my pc.

as it is helpful too you i shall get on with it and post my results

[urbtree]

having real trouble getting any of these online scans to work. ive used panda before but it wont work.

mcaffe says i need ie5 or higher and i have ie7 and trend micro house call just says preparing. i have installed all the active x objects for them but to no avail

[johnwill]

Boot in safe mode with networking and see if the symptoms change.

[urbtree]

before i start thanks for your help thus far johnwill

ok so i`m in safe mode. managed to get panda to work. ran it and it found one virus (which is just a keygen i junderstand these can show as viry), nine spyware and one hacking tool (closeapp.exe) i`ve googled close app and it can be used in the vista transformation pack, which o have. the virus was disinfected but the spyware were not. i`m just running spybot S&D to clear up the spyware


incidentally internetz still seems slow not massivly slow just noticably slow


here is the log from panda.

Incident Status Location

Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4tv50tjk.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Erbtree\Application Data\Mozilla\Firefox\Profiles\3fn9qt54.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Erbtree\Cookies\erbtree@xiti[1].txt
Virus:Generic Malware Disinfected C:\Documents and Settings\Erbtree\Desktop\tools\ImTOO.MP4.Video.Converter.v3.1.40.0824b.Incl.Keygen-BLiZZARD\keygen.exe
Potentially unwanted tool:Application/CloseApp





i know its not your area but did a hijack this log for good measure. i`ve enabled all items usually disabled via msconfig

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:03:46, on 10/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Erbtree\Desktop\tools\Security\HiJackThis.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [XPIcons] C:\Program Files\Camtech\XP Icons\XPIcons.exe
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [VisualTooltip] C:\Program Files\VisualTooltip\VisualToolTip.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Styler] C:\Program Files\Styler\Styler.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [PKR Pal] "./\pkrpal.exe" -osboot
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LifeCam] "c:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [EPSON Stylus C62 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0BIC1.EXE /P23 "EPSON Stylus C62 Series" /O6 "USB001" /M "Stylus C62"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Blaero Start Orb] C:\Program Files\Blaero Start Orb\Blaero Start Orb.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [StatBar] C:\Program Files\Globe Software\StatBar\StatBar.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1191267680625
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 8042 bytes

[johnwill]

Nothing jumps out at me, but you did run the HJT in safe mode, it should be run in normal mode.

[urbtree]

so no idea what could be the problem then as youtube is just stupid slow now
cleaned up all the problems with virus and spy ware now. wanna start looking toward the router/ provider now as it`s the same on my laptop

[johnwill]

Yep, if it's common to more than one machine, time to look at common elements.

Register at DSLReports and run their Line Quality Tests. Post the results link from the top of the test display page here.

[urbtree]

sorry for taking so long and thanks for the helpful links.

this is what i get from the line quality tests
http://www.dslreports.com/testhistory/1528605/89734

[johnwill]

You need to enable PING on the router for the line quality tests to be meaningful.

[urbtree]

http://www.dslreports.com/testhistory/1528605/89734

there we go. i`m not gonna second guess what your driving at but my internet has been running fine for two years so not sure it could be this.

[johnwill]

If you take a look at the results, you'll see you have massive packet loss on some of the tests, that's what I'm driving at. As far as things working for two years, stuff breaks, you should know that.

The results you're getting would certainly concern me, and would explain the issues with streaming. For your reference, here's what a good test should look like.

http://www.dslreports.com/linequalit...6ca594/2336532

[urbtree]

boy do i know that

yeah with my limited knowledge i`t did look bad.
there is no doubt in my mind that you know what your talking about.

i know this is taking a while but do you have any suggestion on how to fix this problem. maybe changing my MTU size.

[johnwill]

It's a communication issue, not a configuration issue. The fact that it happens on more than one machine points to the router, modem, or the ISP. The results you're getting on the line quality test points me to the ISP.

[urbtree]

i`ll get on to my isp 2 moro.
incidentally i lowered my mtu by 8 to 1450 ( i suspect it was set to high due to the recent slow down) and this has seemed to have had an effect for the better. i can now stream reasonably well (not like i used to but usable) torrnets still dont work (not really fussed about that though) and browsing is hit and miss.

tests haven't got much better though although my d/l and upload speed have returned to somewhere near normal
13/2/08 sorry 02/13/08 US date format

if all else failes i`ll just reset the router and re format. i`m prob due to any way

thanks for all your help mate you a true gent, an as a result i now understand a little more about networking